[GH-ISSUE #2095] A simple tool for profile/policies creation #1415

Closed
opened 2026-05-05 08:04:48 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @avilum on GitHub (Aug 24, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2095

I couldn't find a simple tool that defines the syscalls, permissions of a program, etc.
I created this simple script, based on strace and grep, that get's a list of all the unique syscalls of a binary, on the run.
This way, one can whitelist some flows of a program easily, without disassembling.
I'd be happy to create something bigger then that, a solution for nsjail+firejail policies definitions.

https://github.com/avilum/syscalls

Originally created by @avilum on GitHub (Aug 24, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2095 I couldn't find a simple tool that defines the syscalls, permissions of a program, etc. I created this simple script, based on strace and grep, that get's a list of all the unique syscalls of a binary, on the run. This way, one can whitelist some flows of a program easily, without disassembling. I'd be happy to create something bigger then that, a solution for nsjail+firejail policies definitions. https://github.com/avilum/syscalls
gitea-mirror 2026-05-05 08:04:48 -06:00
Author
Owner

@Vincent43 commented on GitHub (Aug 24, 2018):

You may also look at firejail --build option.

<!-- gh-comment-id:415729964 --> @Vincent43 commented on GitHub (Aug 24, 2018): You may also look at `firejail --build` option.
Author
Owner

@chiraag-nataraj commented on GitHub (Sep 27, 2018):

@netblue30 I was thinking we could just put a note in the README or something linking to this repo?

<!-- gh-comment-id:424924449 --> @chiraag-nataraj commented on GitHub (Sep 27, 2018): @netblue30 I was thinking we could just put a note in the README or something linking to this repo?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1415
No description provided.